Firewall
Fortinet

Fortinet Fortinet FortiGate 900D

- The Fortinet FortiGate 900D is a high-performance, next-generation firewall that provides comprehensive security and networking capabilities.

Fortinet Fortinet FortiGate 900D

Specifications

OS
FortiOS
IDS/IPS
16 Gbps
USB
2x USB
UTM
11 Gbps
VPN
35 Gbps
Rack
2U
Ports
18x GE RJ45, 8x GE SFP, 8x 10GE SFP+

Potential Threats

12
Critical
7
High
3
Medium
3
Low

25 Known CVEs

12 critical vulnerabilities found — immediate patching required.
Audit firewall rules and remove unused allow entries. Enable detailed logging. Restrict management access to trusted IPs only.

Default IP

192.168.1.99

Default admin panel address for Fortinet Fortinet FortiGate 900D

Default Credentials — Fortinet Fortinet FortiGate 900D

Username Password Access Type Protocol Port Notes
(blank) web HTTPS 443
(blank) ssh SSH 22
(blank) console Console

Known CVE Vulnerabilities (25)

Sort:
CVE-2024-26013 2025

A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 t...

7.5
CVE-2023-25610 2025

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0...

9.8
CVE-2023-37936 2025

A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 a...

9.8
CVE-2024-21754 2024

A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0...

1.8
CVE-2023-41677 2024

A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13, 1.2.0 through 1....

7.5
CVE-2024-23112 2024

An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through...

8.0
CVE-2023-48788 2024

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiCl...

9.8
CVE-2023-42789 2024

A out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15,...

9.8
CVE-2024-23113 2024

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy v...

9.8
CVE-2024-21762 2024

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through...

9.8

Showing 10 of 25

FAQ

What is the default password for Fortinet Fortinet FortiGate 900D?

The most common default credentials for Fortinet Fortinet FortiGate 900D are listed in the table above. Always change these immediately after setup.

What is the default username for Fortinet Fortinet FortiGate 900D?

The default username for Fortinet Fortinet FortiGate 900D is typically "admin". The full list of default credentials including username, password, access type and port is shown in the table on this page.

How do I change the password on Fortinet Fortinet FortiGate 900D?

Log in to the admin panel using the default credentials listed above. Navigate to Administration → Password or System → Account settings. Enter the current password and set a new strong password. Save the changes.

How do I reset Fortinet Fortinet FortiGate 900D to factory defaults?

Locate the Reset button (usually a small pinhole on the back/bottom of the device). Hold it for 10-30 seconds while powered on until the LEDs flash. The device will reboot with default settings.

Is it safe to leave default credentials unchanged?

No. Default credentials are publicly known and frequently exploited by automated scanners. Change the admin password immediately after first login.

Does Fortinet Fortinet FortiGate 900D have known security vulnerabilities?

Fortinet Fortinet FortiGate 900D has 25 known CVE vulnerabilities documented in our database. The full list with severity ratings is shown on this page. Apply the latest firmware update from the manufacturer to address known issues.

Related Devices